申し訳ありませんが、この言語ではまだご利用いただけません

English
日本語

Agile, CI/CD

Agile, CI/CD, and DevOps are three distinct methodologies for developing and delivering high-quality software. Read articles from Black Duck cyber security experts to learn how to implement these practices in your AppSec program.

Stories

Writers

Top Writers

Taylor Armerding

Black Duck Editorial Staff

Jonathan Knudsen

Last Published

Nov 20, 2022/1 min read

セキュアSDLC 101

By Charlotte Freeman

Tags: Agile, CI/CD , Program Strategy & Planning , DevSecOps , Manage Security Risks

Oct 11, 2022/1 min read

Rapid Scanによる高速で正確な AppSec テストにより、開発者の信頼を築く

By Black Duck Editorial Staff

Tags: SCA , Agile, CI/CD , Build Security into DevOps , SAST , DevSecOps

Mar 08, 2021/1 min read

御社のセキュリティはDevOps環境のペースに後れを取っていませんか？

By Taylor Armerding

Tags: Agile, CI/CD , DevSecOps , Manage Security Risks

Feb 01, 2021/1 min read

サイバーセキュリティの実現方法：スピードが重要な理由

By Jonathan Knudsen

Tags: Agile, CI/CD , Build Security into DevOps , DevSecOps

Aug 11, 2020/1 min read

オープンソースコミュニティから学ぶ：リモートで働かなければならなくなった人たちへ

By Taylor Armerding

Tags: Agile, CI/CD , Security News & Trends , Build Security into DevOps , DevSecOps

Mar 20, 2018/1 min read

アジャイル、CI/CD、DevOpsの違いとは

By John Steven

Tags: Agile, CI/CD , Build Security into DevOps , DevSecOps

Mar 28, 2017/1 min read

4つの主要なソフトウェア開発手法

By Black Duck Editorial Staff

Tags: Agile, CI/CD , Build Security into DevOps , DevSecOps

May 18, 2016/1 min read

ソフトウェア開発ライフサイクルにセキュリティを組み込む10の方法

By Kris Balarama

Tags: Agile, CI/CD , Build Security into DevOps , DevSecOps , Manage Security Risks

Stories

Writers

Top Writers

Taylor Armerding

Black Duck Editorial Staff

Jonathan Knudsen

Last Published

申し訳ありませんが、この言語ではまだご利用いただけません

English
日本語
简体中文

Polaris Platform | Unified platform for managing software security and compliance.
fAST Static | Unified platform for managing software security and compliance.
fAST SCA | Unified platform for managing software security and compliance.
fAST Dynamic | Unified platform for managing software security and compliance.

Coverity Static | Static analysis tool for detecting software defects and vulnerabilities.
Black Duck SCA | Software composition analysis to manage open source security and license compliance.
Continuous Dynamic | Continuous dynamic application security testing.
Seeker Interactive | Interactive application security testing tool for detecting vulnerabilities.
Software Risk Manager ASPM | Application security posture management tool for risk management.
Defensics Protocol Fuzzing | Protocol fuzzing tool to identify and fix security flaws.

Code Sight IDE Plug-in | Integrated development environment plug-in for real-time security feedback.
SCM Integrations | Source code management integrations for seamless security checks.
Build & CI Tool Integrations | Integrations with build and continuous integration tools.
Developer Workflow Integrations | Tools to integrate security into the developer workflow.
3rd-Party AST Tool Integrations | Integrations with third-party application security testing tools.
Cloud Deployment Integrations | Integrations for securing cloud deployments.

Open Source & Security Audits | Comprehensive technical due diligence services for M&A.

AI-generated code | Harness the power of AI coding assistants while managing the risks.
API Security Testing | Manage software risks with a holistic API security testing program.
AppSec Consolidation | Simplify your application security program
Application Security Testing | Solutions to address security risks at all stages of the application life cycle.
DevSecOps | Solutions to help shift security left without slowing down your development teams.
Software Supply Chain Security | Solutions to identify and manage software supply chain risks end-to-end.
Manage AppSec Risk | Scale your application security program without increasing complexity or adding friction.
Cloud & Container Security | Optimize your applications for secure deployment and operation in the cloud.
Open Source License Compliance | Effective solutions for ensuring open source license compliance.
M&A Due Diligence | Identify software risks that could negatively impact the value of acquired IP.
Quality & Security Standards Compliance | Ensure your software complies with the standards critical to customers and regulators.

Static Analysis (SAST) | Analyzing code for security vulnerabilities without executing it.
Software Composition Analysis (SCA) | Analyzing software components for security and license compliance.
Dynamic Analysis (DAST) | Testing running applications for security vulnerabilities.
Interactive Analysis (IAST) | Real-time security testing during application execution.
Penetration Testing | Simulated cyberattacks to identify vulnerabilities.
Mobile Application Security Testing (MAST) | Ensuring the security of mobile applications.
Application Security Posture Management (ASPM) | Managing and improving application security posture.
Fuzz Testing | Identifying vulnerabilities by inputting random data to applications.

Automotive | Security solutions for automotive industry applications.
Financial Services | Security solutions tailored for financial services.
IoT & Embedded | Security for Internet of Things and embedded systems.
Medical Device | Security solutions for medical devices.
Public Sector | Security solutions for government and public sector organizations.

Dev and DevOps Teams | Security tools and practices for development and DevOps teams.
Security Teams | Solutions and support for dedicated security teams.
Legal Teams | Resources and compliance tools for legal teams.